Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Spoonthemes Clear all filters
TI-2024-12417 CVE-2024-13375 · GHSA-h5fp-7r6f-5x9m

Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset

Priority MEDIUM 52

The Adifier System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.1.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01484 Published 2025-01-18 No fix listed CWE-620
TI-2023-27163 CVE-2023-49753 · GHSA-36gm-66fp-prv4

WordPress Adifier System plugin < 3.1.4 - Local File Inclusion vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spoonthemes Adifier System allows PHP Local File Inclusion.This issue affects Adifier System: from n/a before 3.1.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.006 Published 2024-05-17 Fixed in 3.1.4 CWE-22
TI-2023-27162 CVE-2023-49752 · GHSA-j3j2-p3cg-j257

WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoon themes Adifier - Classified Ads WordPress Theme.This issue affects Adifier - Classified Ads WordPress Theme: fro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00588 Published 2023-12-20 Fixed in 3.1.4 CWE-89
TI-2023-27160 CVE-2023-49750 · GHSA-qv9c-vfw7-f233

WordPress Couponis Demo Plugin < 2.2 is vulnerable to SQL Injection

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoonthemes Couponis - Affiliate & Submitting Coupons WordPress Theme.This issue affects Couponis - Affiliate & Submit…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00758 Published 2023-12-19 Fixed in 2.2 CWE-89
TI-2023-26846 CVE-2023-49187 · GHSA-gj58-8prx-8h92

WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spoonthemes Adifier - Classified Ads WordPress Theme allows Reflected XSS.This issue affects Adifier - Classified Ads…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00403 Published 2023-12-15 Fixed in 3.1.4 CWE-79